cinny

CI is red for every PR: npm audit fails on a new high advisory in source-map-js 1.2.1 (via sanitize-html → postcss); 1.2.2 fixes it area: build-ci dependencies priority: high

#345

by jared was closed 2026-10-11 00:53:12 -04:00

LOTUS_FEATURES.md is missing ~55 shipped features area: build-ci docs priority: low

#294

by jared was closed 2026-10-18 10:34:24 -04:00

a11y in CI: axe-core gate + accessibility-tree snapshots as the screen-reader proxy a11y area: build-ci priority: low

#222

by jared was closed 2026-09-20 14:14:59 -04:00

Features 2026-Q4

1

E2E: run the Playwright suite under WebKit as a Safari/iOS proxy area: build-ci area: mobile enhancement priority: low

#221

by jared was closed 2026-09-20 14:14:59 -04:00

Features 2026-Q4

1

CI: e2e job that starts its own Synapse and runs the UI regression suite (no prod secrets) area: build-ci enhancement priority: medium

#220

by jared was closed 2026-09-19 22:46:15 -04:00

Features 2026-Q4

1

Process: no CODEOWNERS or required review — a single push to lotus deploys to production in ~11 minutes area: build-ci priority: low tech-debt

#100

by jared was closed 2026-10-23 16:04:00 -04:00

Audit 2026-09 · Medium & Low

1

Repo hygiene: eight dead GitHub Actions workflows under .github/workflows never run on Gitea area: build-ci priority: low tech-debt

#99

by jared was closed 2026-09-13 00:56:42 -04:00

Audit 2026-09 · Medium & Low

CI: the lotus-build.sh upstream-merge path deploys without running CI area: build-ci priority: high tech-debt

#98

by jared was closed 2026-09-13 00:56:42 -04:00

Audit 2026-09 · High

2026-10-14

1

CI: ESLint runs without --max-warnings, so new react-hooks/exhaustive-deps warnings never surface area: build-ci priority: low tech-debt

#97

by jared was closed 2026-09-12 20:29:12 -04:00

Audit 2026-09 · Medium & Low

CI: bundle size is reported but has no budget — regressions pass green area: build-ci bug performance priority: low

#96

by jared was closed 2026-09-12 20:29:11 -04:00

Audit 2026-09 · Medium & Low

CI: no secret scanning, and config.json (incl. any gifApiKey) ships inside the build image area: build-ci priority: medium tech-debt

#95

by jared was closed 2026-09-13 00:56:44 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

CI: no dependency update automation (Renovate/Dependabot) area: build-ci dependencies priority: medium

#94

by jared was closed 2026-09-13 00:56:43 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

CI: the Docker image is never built — add a docker build job so the documented deploy path can't rot area: build-ci priority: medium tech-debt

#93

by jared was closed 2026-09-13 00:56:43 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

CI: built output is never loaded — add a vite preview boot check after npm run build area: build-ci priority: medium tech-debt

#92

by jared was closed 2026-09-12 20:29:11 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

CI: npm audit is informational — high-severity advisories should fail pull requests area: build-ci priority: medium tech-debt

#91

by jared was closed 2026-09-12 20:29:10 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

CI: add a Playwright smoke test that boots the built client and exercises the composer in an E2EE room area: build-ci priority: high tech-debt

#90

by jared was closed 2026-09-13 00:56:44 -04:00

Audit 2026-09 · High

2026-10-14

syncDecorations.mjs fragile regex parsing area: build-ci priority: low tech-debt

#88

by jared was closed 2026-09-13 00:56:42 -04:00

Audit 2026-09 · Medium & Low

Dead code: unused useForceUpdate.js area: build-ci priority: low tech-debt

#87

by jared was closed 2026-09-13 00:56:42 -04:00

Audit 2026-09 · Medium & Low

Fragile postinstall patch script for folds Icon area: build-ci priority: medium tech-debt

#55

by jared was closed 2026-09-13 00:56:42 -04:00

Audit 2026-09 · Medium & Low

2026-11-14

Package.json engines version misalignment with README and CI area: build-ci priority: medium tech-debt

#54

by jared was closed 2026-09-12 20:29:10 -04:00

Audit 2026-09 · Medium & Low

2026-11-14